[ale] Known SSH exploits?

Dow Hurst dhurst at kennesaw.edu
Mon Oct 14 12:16:15 EDT 2002


As a client of Bob's, I can tell you that when he gets time to read 
this, he is going to be shaking his head in despair at your security 
people! ;-)  Actually, for our installation he recommended using the 
ssh.org version and not openssh.  Also, we stuck with version 2 of the 
SSH protocol and didn't support version 1.  Since the licensing is 
favorable for us on the ssh.org version, ie. free, we have not had any 
worries with the problems cropping up in OpenSSH.  OpenSSH is still 
going thru growing pains so we didn't want to bank on it yet.
Dow


Jeff Layton wrote:

>Good morning,
>
>   Corporate security where I work (who shall remain nameless
>for the moment :) has decreed that SSH is to be outlawed because
>there are known exploits. I'm starting to do a little investigation
>on this issue, but I know there are some security experts on the
>list who might be able to shed some light on this (Bob T. are you
>there? :)
>   Just to add a little comedy to your morning, SSH is outlawed,
>but telnet is allowed and encouraged.
>
>
>TIA,
>
>Jeff
>
>
>--
>
>Jeff Layton
>Senior Engineer
>Lockheed-Martin Aeronautical Company - Marietta
>email: jeffrey.b.layton at lmco.com
>
>"Is it possible to overclock a cattle prod?" - Irv Mullins
>
>This email may contain confidential information. If you have received this
>email in error, please delete it immediately, and inform me of the mistake by
>return email. Any form of reproduction, or further dissemination of this
>email is strictly prohibited. Also, please note that opinions expressed in
>this email are those of the author, and are not necessarily those of the
>Lockheed-Martin Corporation.
>
>
>
>
>---
>This message has been sent through the ALE general discussion list.
>See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
>sent to listmaster at ale dot org.
>
>
>  
>

-- 
__________________________________________________________
Dow Hurst                  Office: 770-499-3428
Systems Support Specialist    Fax: 770-423-6744
1000 Chastain Rd., Bldg. 12
Chemistry Department SC428  Email:dhurst at kennesaw.edu
Kennesaw State University         Dow.Hurst at mindspring.com
Kennesaw, GA 30144
*********************************
*Computational Chemistry is fun!*
*********************************



---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.






More information about the Ale mailing list